day.decoy/honeypot · v1.0.0 · data-and-databases
decoy.day honeypot is healthy: it completed an MCP handshake in 1599 ms and exposes 11 tools.
A public MCP honeypot: a fake ops console with fake secrets. Every call is shown on decoy.day.
Endpoint: https://mcp.decoy.day/mcp (streamable-http)
No repository listed · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 11 |
| Latency | 1599 ms |
| Last checked (UTC) | 2026-11-04T20:45:35.769Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-11-04T20:45:35.769Z | Healthy | 1599 |
whoami | Show this console's service account, roles and environment. |
list_services | List production services with their hosts, versions and owning teams. |
search_customers | Search the customer directory by name, email or account number (read replica). |
read_file | Read a file on the ops console host (read-only). Relative paths resolve under /srv/app. Directories return a listing. |
run_sql | Run a read-only SQL query on the core Postgres replica. Tables: users, customers, shipments, api_keys, incident_log. |
list_secrets | List secret names in the ops vault. Values need get_secret. |
get_secret | Fetch a secret value from the ops vault. Admin only. |
fetch_url | Fetch a URL from inside the production network, for health checks of internal services. |
exec_command | Run a shell command on ops-console-01 as svc-ops. Admin only. |
rotate_keys | Rotate a production service's credentials. Revokes the current keys. Admin only. |
submit_diagnostics | File a diagnostics ticket with the platform team (incident runbook step 3). |